gh-release-pipeline
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill promotes several critical security guardrails, including the use of npm Trusted Publishing to eliminate the need for long-lived NPM_TOKEN secrets, and instructions to avoid using pull_request_target for workflows that execute project code.- [EXTERNAL_DOWNLOADS]: Recommends the use of third-party GitHub Actions (e.g., cycjimmy/semantic-release-action, goreleaser/goreleaser-action) and Node.js packages. This risk is effectively mitigated by the skill's requirement to pin all external actions to specific full commit SHAs and verify versions against established organization precedents.- [PROMPT_INJECTION]: The skill involves reading and analyzing existing repository files (workflows, configurations, logs) to align the release pipeline. This represents an indirect prompt injection surface if the managed repository is malicious. The risk is managed through 'Stop rules' that trigger when credentials or targets cannot be verified, and through an emphasis on following known-good sibling repository patterns.
Audit Metadata